Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/SA1gp06yksmgIdCIbsrTrxvG-9M.roa
File: SA1gp06yksmgIdCIbsrTrxvG-9M.roa (raw, json)
Hash identifier: 26MoDJx3NUkaaOmtF7CeE6dDUuq+Pkt6OeyScyy5IDc=
Subject key identifier: 48:0D:60:A7:4E:B2:92:C9:A0:21:D0:88:6E:CA:D3:AF:1B:C6:FB:D3
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01833A57B53C55E1E72C6DA8E40CCC901034
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/SA1gp06yksmgIdCIbsrTrxvG-9M.roa
Signing time: Wed 14 Sep 2022 04:52:50 +0000
ROA not before: Wed 14 Sep 2022 04:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35539
IP address blocks: 93.123.192.0/18 maxlen: 18
46.160.224.0/21 maxlen: 21
95.131.208.0/21 maxlen: 21
93.95.160.0/21 maxlen: 21
46.160.232.0/21 maxlen: 21
46.160.240.0/21 maxlen: 21
93.123.128.0/17 maxlen: 17
46.160.248.0/21 maxlen: 21
93.123.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3a:57:b5:3c:55:e1:e7:2c:6d:a8:e4:0c:cc:90:10:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 14 04:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=480d60a74eb292c9a021d0886ecad3af1bc6fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:05:ea:73:65:27:9b:1a:be:4b:fd:a9:90:
f3:73:83:20:14:c7:dc:4e:6e:40:34:0e:a9:d6:06:
3e:77:4d:8a:87:f8:dd:ff:41:d0:34:3d:4a:13:5f:
b3:dd:de:1f:4a:06:71:b5:12:2a:84:a1:8a:4f:f2:
f1:ed:9b:5d:18:2f:9d:9c:7b:be:66:67:98:b6:2a:
19:d6:c6:b5:56:e7:b1:7e:d1:5d:64:09:6c:c1:ad:
40:73:d8:73:67:e3:8e:7d:a3:bb:f4:bb:32:91:af:
03:84:ab:04:32:21:dc:02:d6:54:15:7b:8d:aa:bc:
63:0e:93:d1:6d:04:d4:09:02:74:97:9b:f6:52:64:
1f:37:c2:5c:a8:80:d5:17:43:d6:59:a2:3b:4a:19:
f3:5d:e3:f9:84:1a:04:7e:c1:79:6e:60:02:79:47:
2e:65:63:05:5b:35:18:ee:03:c9:8f:67:15:b1:89:
b2:5b:3b:90:20:a4:d9:ca:f8:89:e6:af:48:ab:f2:
cc:59:d6:5a:b4:c2:54:d2:f5:4e:71:fa:60:0e:c8:
6c:10:89:3f:70:06:31:f4:22:4d:5d:2e:f8:00:54:
36:32:4d:90:0c:60:a8:b2:d1:f0:d8:b6:3b:23:a0:
b8:95:5d:f7:23:28:a9:61:82:15:41:6e:b1:a3:b0:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:60:A7:4E:B2:92:C9:A0:21:D0:88:6E:CA:D3:AF:1B:C6:FB:D3
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/SA1gp06yksmgIdCIbsrTrxvG-9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.224.0/19
93.95.160.0/21
93.123.128.0/17
95.131.208.0/21
Signature Algorithm: sha256WithRSAEncryption
17:43:1c:a6:4f:03:70:25:cb:dc:83:f0:7b:44:ee:da:e0:f1:
72:c0:b5:7e:c3:df:06:70:c8:88:77:79:f5:c9:07:70:2d:3a:
dd:94:0d:7a:53:c0:34:bf:f3:d8:ef:89:21:47:87:c3:b7:33:
01:2e:8d:41:17:f0:8f:69:2f:4e:66:9d:d0:0d:d7:4a:d3:4e:
3b:88:c6:32:05:f5:98:26:89:14:dc:34:2a:98:12:2f:6c:7f:
ca:50:6d:f6:69:b4:b3:39:ce:ec:57:93:10:74:36:1d:f5:1f:
61:73:d5:42:a2:b8:5e:f7:d0:6a:7e:5e:31:ec:a1:47:2a:3a:
fb:08:9a:af:c1:5a:71:7e:52:65:87:d9:2b:3c:6e:90:13:ef:
4d:df:39:84:78:20:73:77:87:d8:d2:f0:c0:a1:d1:20:fb:f8:
64:e1:b4:d7:6a:72:fe:11:2a:b4:ea:00:51:00:27:3c:64:f2:
b4:9c:0b:d1:3e:bb:70:2b:f9:1c:28:84:9b:17:f3:9d:5a:4c:
51:b8:e6:1a:33:e8:7b:a4:d0:70:06:bb:10:11:ec:6a:ed:09:
a5:9b:65:63:b5:0e:d4:30:27:14:10:df:9e:58:7c:4f:73:fb:
42:ab:1b:da:c2:84:3e:40:ab:d2:dc:69:ee:a6:bb:96:b4:b7:
34:03:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:57 2023 by rpki-client on console-ams.rpki-client.org